Lessons on implementing SAST

Long but great reading on how Google does SAST. Contains things that didn't work for them and what they did to end up with working solutions.

The Lessons and Conclusion chapters are must read! Especially for anyone that tries to implement SAST in an organization.